Post #3475462
2026-06-29 17:21 UTC
RE: https://infosec.exchange/@ifin/116834521039597035
Hot take but TLD-blocking is mostly just enforcing US hegemony.
It was that when it was .biz and .xyz that everyone was blocking.
Maybe if you're gonna do that get the registrar and block domains based on that.
Replies (1)
-
@mttaggart@infosec.exchange 2026-06-29 18:45
@aredridel@kolektiva.social That is a hot take, and one with which I fervently disagree. .xyz is a great example. In any list of current domain IOCs, it would float to the top of obviously malicious top-levels. It is not a ccTLD, so I'm not sure where "US hegemony" comes into play for that one. Same with .shop. Not blocking such a TLD would be negligence on my part as a defender. The odds of a request to that domain from my network being benign are infinitesimal compared to the odds that it's malicious/unwanted in some way. Several other TLDs share that characteristic, as .garden appears to now.